IAM Security Engineer – Senior

📋 Job Overview

SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values.

🏢 About SOFTSWISS

SOFTSWISS is a company that values culture and seeks professionals who align with their values.

🎯 The Role

You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management.

✅ Key Responsibilities

• Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs.
• Lead automation of access lifecycle management processes.
• Design and implement RBAC/ABAC models across enterprise systems.
• Troubleshoot and resolve complex IAM-related incidents
• Integrate IAM services into CI/CD and Infrastructure-as-Code workflows.
• Provide technical expertise during identity-related investigations.
• Define secure configuration standards for IAM platforms.
• Develop and maintain high-quality technical documentation.

📌 Required Qualifications

• Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows.
• Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog, including automation rules, business logic, and approval flows.
• Strong understanding of RBAC/ABAC implementation patterns.
• Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication).
• Advanced troubleshooting and debugging capabilities across IAM ecosystems.
• Strong automation and scripting skills (e.g., PowerShell, Python, Bash)
• Ability to translate security requirements into scalable IAM solutions.

⭐ Desirable Experience

• Strong knowledge of IAM architecture patterns and federation models.
• In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms.
• Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory).
• Familiarity with PAM integration and privileged access governance concepts.

🎁 Benefits

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events

🛂 Visa & Eligibility

Visa and eligibility information not specified.